freeradius 2.0.1 and xtradius
Hy, I am trying to proxy with freeradius 2.0.1 the requests to an xtradius. The problem is that it doesn't works how it should. rad_recv: Access-Request packet from host 127.0.0.1 port 35640, id=136, length=67 User-Name = "aol123" User-Password = "test" NAS-IP-Address = 10.0.0.2 NAS-Port = 10 Framed-Protocol = PPP +- entering group authorize ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop rlm_realm: No '@' in User-Name = "aol123", looking up realm NULL rlm_realm: No such realm "NULL" ++[suffix] returns noop ++[unix] returns notfound expand: %{User-Name} -> aol123 users: Matched entry DEFAULT at line 136 ++[files] returns ok ++[pap] returns noop Sending Access-Request of id 201 to 9.0.0.2 port 1812 User-Name = "aol123" User-Password = "test" NAS-IP-Address = 10.0.0.2 NAS-Port = 10 Framed-Protocol = PPP Service-Type = Framed-User Proxy-State = 0x313336 Proxying request 3 to home server 9.0.0.2 port 1812 Sending Access-Request of id 201 to 9.0.0.2 port 1812 User-Name = "aol123" User-Password = "test" NAS-IP-Address = 10.0.0.2 NAS-Port = 10 Framed-Protocol = PPP Service-Type = Framed-User Realm = "AOL" Proxy-State = 0x313336 Going to the next request Waking up in 0.9 seconds. WARNING: Insecure packet from host 213.157.176.7: Packet does not contain required Message-Authenticator attribute Waking up in 0.8 seconds. Waking up in 13.9 seconds. After this the client is authentificated by xtradius but I don't get the output of what the xtradius server says(the attributes.), and radtest give me this: rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=136, length=20 The auth and acct on the xtradius are some scripts made in phyton. This give's me if I radtest directly the xtradius server: radtest aol123 test 9.0.0.2 10 testing1232 19 10.0.0.2 Sending Access-Request of id 80 to 9.0.0.2 port 1812 User-Name = "aol123" User-Password = "test" NAS-IP-Address = 10.0.0.2 NAS-Port = 10 Framed-Protocol = PPP radclient: received bad packet: WARNING: Insecure packet from host 9.0.0.2: Packet does not contain required Message-Authenticator attribute Sending Access-Request of id 80 to 9.0.0.2 port 1812 User-Name = "aol123" User-Password = "test" NAS-IP-Address = 10.0.0.2 NAS-Port = 10 Framed-Protocol = PPP radclient: received bad packet: WARNING: Insecure packet from host 9.0.0.2 : Packet does not contain required Message-Authenticator attribute And also I don't get the attributes. I must say that i haven't try to authentificate thru freeradius with a real client only with radtest it is posible to work even if I get thoes warnings and no attribute displayed? --------------------------------- Looking for last minute shopping deals? Find them fast with Yahoo! Search.
John Joe wrote:
I am trying to proxy with freeradius 2.0.1 the requests to an xtradius. The problem is that it doesn't works how it should. ... This give's me if I radtest directly the xtradius server: ... radtest aol123 test 9.0.0.2 10 testing1232 19 10.0.0.2 Sending Access-Request of id 80 to 9.0.0.2 port 1812 ...
radclient: received bad packet: WARNING: Insecure packet from host 9.0.0.2: Packet does not contain required Message-Authenticator attribute
I'm not sure how that can happen. The code does NOT set the flag saying "require message authenticator". What OS/CPU do you have? Did you install 2.0.1 on top of another version? Alan DeKok.
participants (2)
-
Alan DeKok -
John Joe